CRISC Certified in Risk and Information Systems ControlGovernanceEasy

A global financial institution is undergoing a major digital transformation, introducing numerous new technologies and processing vast amounts of sensitive customer data. The board of directors is concerned about ensuring that the transformation aligns with the organization's strategic objectives and manages emerging risks effectively. Which of the following is the MOST crucial role for the board in this context?

  1. AConducting forensic investigations into any data breaches or security incidents that occur during the transformation.
  2. BSetting the organization's risk appetite and ensuring effective oversight of the ERM framework.
  3. CApproving detailed technical architecture designs for all new digital platforms.
  4. DPerforming daily oversight of project delivery and resource allocation for the transformation initiatives.
Show answer & explanation

Correct answer: B. Setting the organization's risk appetite and ensuring effective oversight of the ERM framework.

The board's most crucial role in organizational governance is to set the strategic direction, including defining the organization's risk appetite, and providing oversight of the effectiveness of the Enterprise Risk Management (ERM) framework. They focus on strategic alignment and overall risk posture, not operational details like technical designs, daily project oversight, or incident investigations.

Why the other options are wrong

  • A. Forensic investigations are reactive and operational, falling under management's responsibility, with board oversight of outcomes.
  • C. Approving technical designs is an operational task typically handled by IT management, not the board.
  • D. Daily project oversight is a management function, not a strategic board responsibility.

Board's Role in Governance

The board of directors is primarily responsible for setting strategic direction, defining risk appetite, and providing oversight of management's execution of strategy and risk management.

  • Focus on strategy, not operations.
  • Defines risk appetite.
  • Ensures ERM effectiveness.

Memory trick: The Board wears the crown, setting the course and checking the shields.

More Governance questions